{ 
[s:SES]. [es:EO+(Info)]. [e1,e2:E]. [a:Atom1].
(ses-flow(s;es;a;e1;e2) 
) }
{ Proof }
Definitions occuring in Statement :
ses-flow: ses-flow(s;es;a;e1;e2),
ses-info: Info,
security-event-structure: SES,
event-ordering+: EO+(Info),
es-E: E,
uall: [x:A]. B[x],
prop: ,
member: t T,
atom: Atom$n
Definitions :
uall: [x:A]. B[x],
member: t T,
all: x:A. B[x],
nat: 
,
implies: P 
Q,
le: A 
B,
ge: i 
j ,
not: 
A,
false: False,
prop: ,
or: P 
Q,
ses-flow: ses-flow(s;es;a;e1;e2),
ycomb: Y,
and: P 
Q,
exists: 
x:A. B[x],
cand: A c B,
top: Top,
so_lambda: 
x y.t[x; y],
assert: 
b,
btrue: tt,
guard: {T},
ifthenelse: if b then t else f fi ,
true: True,
uimplies: b supposing a,
es-E-interface: E(X),
so_apply: x[s1;s2],
sq_type: SQType(T),
decidable: Dec(P),
subtype: S 
T,
!hyp_hide: x
Lemmas :
event-ordering+_wf,
ses-info_wf,
es-E_wf,
event-ordering+_inc,
security-event-structure_wf,
nat_properties,
ge_wf,
nat_wf,
le_wf,
es-rank_wf,
es-rank_le,
es-causl_wf,
es-causle_wf,
es-rank_property,
event-has_wf,
es-le_wf,
es-E-interface_wf,
ses-send_wf,
es-interface-subtype_rel2,
sdata_wf,
top_wf,
ses-rcv_wf,
eclass-val_wf,
subtype_base_sq,
bool_subtype_base,
es-causle_weakening_eq,
es-causl_transitivity2,
es-causle_weakening,
decidable__es-causl,
es-causl_transitivity1,
ses-encrypt_wf,
encryption-key_wf,
ses-decrypt_wf,
es-locl_wf,
ses-decrypted_wf,
ses-encrypted_wf,
ses-cipher_wf,
ses-crypt_wf,
ses-key-rel_wf,
ses-decryption-key_wf,
ses-encryption-key_wf,
not_wf,
symmetric-key_wf,
es-causl_weakening,
assert_elim,
in-eclass_wf,
decidable__es-causle
\mforall{}[s:SES]. \mforall{}[es:EO+(Info)]. \mforall{}[e1,e2:E]. \mforall{}[a:Atom1]. (ses-flow(s;es;a;e1;e2) \mmember{} \mBbbP{})
Date html generated:
2011_08_17-PM-07_19_17
Last ObjectModification:
2011_06_18-PM-01_11_29
Home
Index